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information can be collected from available call setup signaling parameters; 
therefore, the technologies can be used with switch systems no. having specahzed 
scaling protocols designed ,0 perform electronic surveillance for redirected c*. 
For example, basic call setup signaling for initiating and establishing a call can be 
used, and supplement call setup services need no. be supported by a swtch. 

,n illus.ra.ed embodiment a switch can map an incoming call from a servtce 
piatform swuch «o an existing outgoing call using hunk group characteristics (e.g 
trunk type or trunk group membership) ,o determine .he correlation key. If destred, 
onl y designated trnnk groups need be checked. In mis way, the number of hunks 
being checked during correlation can be reduced. 

,„ some situations (e.g., call termination), a single party under survetllance 
migh , be associated with multiple simultaneous calls. In such a case, an .dentity 
se.ected from a pool of dedicated identities can be substituted for tire actual tdentny 
in a call setup signaling parameter. Correlation cart men take place based on the 

W 15 selected identity. 

The foregoing and other features and advantages will become more apparent 
from the following detailed description of disclosed embodiments, which proceeds 
with reference to the accompanying drawings. 
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BRIEF DESCRIPTION OF THE FIGURES 

FIG. 1 isablock diagram showing a scenario in which effective electronic 
surveillance can be circumvented. 

FIG. 2 is a flow chart showing an exemplary method for achievmg electron* 

surveillance in a hairpin loop scenario. 

FIG. 3 is a data flow diagram showing exemplary inputs for achieving 

electronic surveillance in a hairpin loop scenario. 

FIGS 4 5 6, and 7 are block diagrams showing an exemplary 

telecommunications network in which electronic surveillance is achieved in a 

hairpin loop scenario. 

FIG. 8 is a block diagram showing an exemplary telecommunications 

network in which ports are depicted. 
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FIG. 9 is flow chart showing an exemplary method for constructing an 
electronic surveillance message in a hairpin loop scenario. 

FIG. 1 0 is a flow chart showing an exemplary method for achieving 
electronic surveillance in a directory assistance call completion situation. 

FIGS. 1 1 A and 1 IB are signaling diagrams showing an exemplary 
implementation for achieving electronic surveillance in a directory assistance call 
completion situation. 

FIGS. 12A and 12B are signaling diagrams showing an exemplary 
implementation for achieving electronic surveillance in a prepaid services situation. 

FIG. 1 3 is a block diagram showing an exemplary switch system for 
achieving electronic surveillance in a hairpin loop scenario. 

FIG. 14 is a flow chart showing an exemplary method for achieving 
electronic surveillance in a hairpin loop scenario, including simultaneous multi-call 
per subscriber support. 

DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS 

Overview 

An exemplary scenario in which effective electronic surveillance can be 
circumvented is shown in FIG. 1 . In the example, a telecommunications system 
100 having at least two switches 124 and 126 is shown. A first telecommunications 
device (e.g., telephone) 1 12 establishes an incoming leg 132 to switch A 124 (e.g., 
as a result of a subscriber who initiates a telephone call). Based on the call leg 132, 
an appropriate electronic surveillance message can be sent to a monitoring device 
162. For example, an origination message can be sent to indicate the called party. 
In the example, the called party can be called an "interim destination." 

In the example, the call is routed to switch B 126 (e.g., because switch A 124 
is unable to handle a requested service such as directory assistance with call 
completion, network-based voice-activated dialing, voicemail callback, or prepaid 
calling services). The call leg 134 is thus established. As a result of the service 
provided by the switch B 126 (e.g., determining that the call is to be routed to 
another destination, such as the device 1 14), a destination is determined. Then, the 
call is routed back to switch A 124. Another call leg 136 is thus established or 
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attempted. Because the call returns to a switch that redirected it, the eall leg 
scenario 142 is sometimes called a "hairpin loop." 

The call is ultimately routed via call leg .52 to a device 1 .4 corresponding to 
t he destination. However, switches A 124 and B ,26 may ttea, me call leg , 52 as an 
independent eall, and an electronic surveillance message might not be provrded. 
Thus, the identity of the destination device ,14 has no. been sent to the monttonng 

device 162. . 

I„ disclosed embodiments, correlation between the call legs m the hauptn 
,„ 0 p scenario 142 can he accomplished. Based on the correlation, an appropnate 
destination-indicating electronic surveillance message can he ~* ' J" 
e,ee«onic surveillance message can men be sen, to a monitoring dev.ce ,62 so tha, 
the destination (e.g., the device 1 14) of the call is indicated. 

in some situations, a call can completed without redirecting it to swttch A 
,24. In such a case, electronic surveillance can be performed (e.g., election* 
0 15 surveillance messages sent) at switch B ,26. 

« in some situations, the destination of a call may not have changed. For 

example, .he ultimate destination of a call may be the same as its initial destinatton, 
even though the call was routed to another switch. The destinations can be 

m^cacre sending can be limited to those 
compared, and electronic surveillance message sending 

20 situations in which the destinations are different. 

Example 1 - Exemplary Method for Achieving Electronic Surveillance in a 
Hairpin Loop Scenario 

An exemplary method 200 for achieving electronic surveillance in a hairpin 
25 loop scenario is shown in FIG. 2. Such a method can be implemented, for examp,e, 
in a telecommunications architecture involving a, leas, two swttches. 

M 212 information is stored for an outgoing call leg. The stored mformatton 
i, sometimes called "correlation information" because it can later be used to 
correlate the call leg with an incoming leg to de.ee, a potential hairpin ,oop scenano. 
30 The information can take a variety of forms, such as patty identification (e*. phone 
number), billing number, or otiter identifier (e.g., dynamically assigned when the 
a!, leg s formed). The outgoing call leg can be, for example, a call ,eg routed from 
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a meeting switch .o a service platform switch. Information for an incoming leg 
. ^alllea mar triggers the outgoing leg and generates an electrome 

(e.g., an mcommg c^ In some cases, i. may he desirah.e ,o limir 

slored llarion mformation, an incoming leg corresponding ,o the omgo.ng leg ,s 
led and corre.ated. For example, call setup signahng —^mecafl 
Idicare a pariy idenriftcarion, billing numher, or omer iuformatton. Further, the al. 

of service processing). wween 
relation can be achieved, for example, by detecrmg a ma, h^ 
htformauon stored a, 212 and me caU serup signaling —on rebtfed to 

f3 15 incoming leg. electronic surveillance 

m At216 as a result ofeorrelatingrhe call legs, an electro 

3 message indicaring the destination is consrructed. The appropriate electron* 

S — eemessagecanbesenrroamomroringdevieero.hieveelechon, 

20 call path (e.g., h y re,easiug me outgoing leg, the mcommg leg, or bom) 
call is routed to its destination. 

in a Hairpin Loop Scenario 

An exemplary data flow 300 for achieving e.ectronic surveiflan ce ina 
25 , • r, r -x correlation information 304 and call 

Hairpinloop scenario is shownmFIG. ^^^^ 

signali n g informal for an — * 3« « - ^ 
electronic surveillance message construction 308. The cone 
electronic Rg informatl0n from 

he anv of a vanety of information, inciuuing 

i i„ from a redirecting switch to a service processing switch), such 
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generated identifier can be temporarily placed in calling party identity or billing 
fields. The correlation information can be stored in a list to be consulted for later 
processing (e.g., correlation). 

In some cases, additional data can be used for the correlation detection and 
5 electronic surveillance message construction 308, such as trunk type for incoming 
call legs, the destination of a call, the calling party's identity, a list of identities under 
surveillance, and other information. In the case of trunk type, a trunk can be 
designated to be of a type (e.g., incoming hairpin loop type or outgoing hairpin loop 
M= type) to be monitored for hairpin loop scenarios. In such an arrangement, call legs 

1 10 can additionally be checked to determine if they are on a trunk being of a type to be 

2 monitored. In this way, checking for hairpin loop scenarios need not take place for 

01 

h 4 trunks not of the designated type. 

fy For example, call signaling information for outgoing call legs can be stored 

based on whether the call leg is going out on a trunk of type "outgoing hairpin loop," 
15 and call signaling information for incoming call legs can be correlated based on 
whether the call leg is coming in on a trunk of type "incoming hairpin loop." 

Further, or alternatively, when correlating an identifier for an incoming call, 
only identifiers associated with trunk of type "outgoing hairpin loop" need be 
checked for correlation. Trunks of type "incoming hairpin loop" need not be 
20 checked; thus, the number of trunks to be checked can be reduced. 

In the case of a list of identities under surveillance, the list can be checked to 
determine whether electronic surveillance processing need be performed for a call 
(e.g., based on the calling party's identity). In this way, electronic surveillance 
messages can be constructed only for those calls for which surveillance is ordered as 
25 indicated by the list. 

Example 3 - Exemplary Electronic Surveillance in a 
Hairpin Loop Scenario 

FIGS. 4-7 are block diagrams showing an exemplary telecommunications 
30 system 400 in which electronic surveillance is accomplished in a hairpin loop 

scenario. In the telecommunications system 400 of FIG. 4, a telecommunications 
device 412 is employed by a customer under surveillance to make a call requiring a 
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service not to be processed by switch A 424, which receives the call via the 
incoming call leg 432. The telecommunications device 412 can be a wireless 
telephone or a landline telephone. The monitoring device 418 can receive electronic 
surveillance messages (e.g., from switch A 424) indicating call activity. 
5 As shown in FIG. 5, switch A 424 routes the call to switch B 426 to facilitate 

performance of the service, forming the call leg 534. The call leg 534 can be 
described as the first leg in a potential two-leg hairpin loop scenario. Because 
switch A 424 redirects the call, it is sometimes called a "redirecting switch." 
Because switch B 426 performs call servicing, it is sometimes called a "service 
10 platform switch." Switch B 426 can be any of a variety of switches in a variety of 
locations (e.g., a single DS1 adjunct platform collated with switch A 424 or a 
Service Switching Point for a large network service center at a distant location). 

Then, as shown in FIG. 6, after performing service processing and possibly 
determining a new destination, switch B 426 routes the call back to switch A 424, 
1 5 requesting that the call leg 636 be formed, which would result in a hairpin loop 
scenario (i.e., for the call legs 534 and 636). 

However, the call legs 534 and 636 can be correlated via correlation 
W information. Based on the correlation, an electronic surveillance message indicating 

the destination corresponding to the device 414 can be sent to a monitoring device 
20 41 8 as shown in FIG. 7. The electronic surveillance message type may be 

determined by call type. That is, one type of electronic surveillance message can be 
used if a target under surveillance originates a call, and another type can be used if a 
call is attempting to complete to a target under surveillance. 

The call is routed to the destination device 414 (e.g., via the call leg 738). 
25 The identity of the destination device 4 1 4 can be determined by examination of a 

parameter (e.g., a "called party" parameter) contained in the request to form the call 
leg 636. 

Example 4 - Exemplary Electronic Surveillance in a Hairpin Loop 
30 Scenario Showing Ports 

FIG. 8 shows an exemplary telecommunications system 800, including an 
illustration of various ports. Although input and output ports are shown in the 
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ex^ple, bidirectional poris can be used. In the example, a .e.ecom— ons 

T .mates a call <e g a customer initiates a telephone call), whtch ,s dtrected 

device originates a caine.g., As a result 

to the pot, 842A of the switch 824, resuUing in an incommg call leg 832. 
of determining ft* the call is to be directed to a service platform for proeessmg, me 

call leg 834 Electronic surveillance messages (e.g., an originate message 
Liclg tba, a call has been made from a monnored party) can be sen, from ,he 
switch 824 ,o,he monitoring device 818 via the por,842E. 

After performing service processing, the service platfonr, can route the U 

836 which wouid form a hairpin loop scenario. Upon correlatton of me call I gs 
834 and 836, an appropriate Cecrionic surveillance message indicating the call s 
'■D desrinationcanbesenttomemonitoringdeviceSlS. 

For example, correiation infotmation can be stored .ha. can be compared for 
, 5 port s 842C and 8420 .„ de.etmine .ha. me . call (e.g., the same calhng p^y 

same b.lling identifier, or other identi^ing informafion) ts tnvolved. Upon detectmg 

be constructed .o indica.e me des.ina.ion 8,4, «• ,he message can be s n, .o h 
m „„i,oring device 8,8. The can can be routed ou, .he por, 842B ,o us deslmahon 
20 814, forming the call leg 83 8 . 

El^le 5 - Etenplary Metkoa ofAel,ie«n g Electronic Surveillance in a 
Hairpin Loop Scenario Via Ports 

An exemplary method 900 for processing a call while achieving electronic 
25 stance ,n a hairpin loop scenario is shown in FIG. 9. The method can be used, 
for example, in a .elecommunicafions ne.worx comprising a, leas, a reduec.mg 
switch and a service platform switch. 

At 910, an incoming call is received a. a por,. For example, a subsenber 

30 migl " Z 9 Z me call is routed ou, a por, from me redirecting swirch ,o ,he service 
p , at form switch. At such ,ime, i, can be defined whether hairpin loop scenano 
Lfion is ,o be performed (e.g., by checKng v*e,her rh, 1. * be mon„ored.n r 
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whether the outgoing trunk associated with the call is designated as being of a type 
for which hairpin loop detection is to be performed). If so, correlation information 
can be collected from call setup signaling information. For example, information 
indicating the calling partes identity, billing identifier, or other information can be 
stored. Also, the port out of which the call is being routed (e.g., from the redirecting 
switch) can be stored. Further, an indication of the port on which the call arrived 
(e.g., at the first switch) can be stored. Alternatively, such information can be 
determined later (e.g., as described below). 

At 914, a destination for the call is determined. For example, if the service 
platform switch is related to directory assistance call completion, a calling customer 
typically requests a search for the number of a called party. Or, in the case of 
network-based voice-activated dialing, the spoken word "home" can be translated 
into a home telephone number. The call can then be directed to the destination 
number. 

At 916, as the call is forwarded back to the redirecting switch, appearing to 
be a new call on another port, the trunk type can be checked to see if the call is to be 
checked for hairpin loop detection. If so, call set up signaling information can be 
collected (e.g, party identity, billing identifier, or other information) and checked 
against correlation information stored earlier for the call at 91 8. If there is a match, 
a potential hairpin loop scenario is indicated. For example, if the party identity for 
an outgoing call routed from the redirecting switch to the service platform switch 
matches the party identity for an incoming call arriving at the redirecting switch, the 
calls are actually the same call forming a hairpin loop scenario. Further, it can be 
determined whether electronic surveillance is to be performed for the call (e.g., by 
checking a list of identities for which electronic surveillance is to be performed). 

Responsive to correlating the call on the ports and determining that 
electronic surveillance is to be performed for the call, an appropriate destination- 
indicating electronic surveillance message can be constructed at 922 (e.g., a J-STD- 
025 LAES origination or redirection message). The call can then be routed to its 
determined destination. 



-10- 



02/26/02 6541-61 171 AWS 548 Express Mail Label No. EV053214056US 

• Date of Deposit: February 27, 2002 

Example 6 - Exemplary Methods and Systems for Achieving Electronic 
Surveillance for a Hairpin Loop Scenario in a Directory Assistance Call 

Completion Situation 

FIGS. 10 and 1 1 show exemplary methods and systems for achieving 
electronic surveillance for a hairpin loop scenario in a directory assistance call 
completion situation. In the example, a telecommunications network 1 100A and 
1 100B comprises access to a public switched telephone network 1 1 12, a mobile 
telecommunications device 1 1 14, a redirecting switch 1116, and a service platform 
switch 1 1 1 8 for processing directory assistance call completion. The service 
platform switch 1118 can provide other or additional services (e.g., voice-activated 
dialing, voicemail callback, or prepaid services), and the illustrated methods work in 
a similar manner. Electronic surveillance processing can be performed transparently 
to the service platform switch 1118. For example, the service platform switch 1118 
need not include functionality related to electronic surveillance message generation. 

In the example, ISUP signaling (e.g., for an SS7 network) is shown, but other 
signaling interfaces (ISDN-PRI, ISDN-BRI, Rl Feature Group-D 5 or GSM-based 
implementations) or protocols can be used. Although FIGS. 1 1 A and 1 IB depict a 
Charge Number parameter, any number of other parameters (e.g., a calling party 
number or call reference parameter) can be used in its place for correlation. A 
monitoring device 1 120 can be used to receive electronic surveillance messages for 
law enforcement. 

Further, in the example, signaling is done to comply with the J-STD-025 
standard for achieving lawfully authorized electronic surveillance (e.g., by sending 
origination or redirection messages). However, signaling could be done in a variety 
of other ways, including a way that complies with another standard or a revision of 
the J-STD-025 standard. 

A method 1000 for processing a call is shown in FIG. 10. At 1012, a 
directory assistance call is received (e.g., at the redirecting switch 1116 from a 
subscriber using the device 1114). For example, a subscriber at the telephone 
number "425-555-1234" might dial "411," resulting in call setup information being 
sent to the redirecting switch. Upon determining that the call is to be monitored, an 
origination message can be sent to the monitoring device 1 120. 
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A, 1014 can processing determines .ha. .he call is .o he ronred over an 

, r.„ ome"ou«oing hairpin loop trunk"), so the billing 

outgoing hairpin trunk group (e.g., type outgoing rp .„, 

ide tiry parameter is populated wim Automatic Number ,dentifica«on ( AN. ) 
II, on (e.g., from me incoming c*„ ahove) and the call is routed to a setvtce 

• , k cnt to the service platform switch (e.g., the switch 1118), 
f'T AM") signal can be sent to tne service yia 

( 1AM ) stg briber's phone number) as part of the call 

including billing infoimatton (e.g., the suoscnoe v 

"m m6 a voice path is established ftom the communications device (e.g 
.he device 1.14) to .he directory assistance operator. As illusttated, me voice path 

Iplele me call to the destination (e.g., a phone nunther). After me destinafi on of 

attempts to establish an incoming call leg .o me redirecttng nn c . . 6 «-> 
setup signaling, indicating me ultimate destination of .he call a. ,018. In 
example, the attempt is shown as (he "IAM-3" signal. 

A, 1022, billing information (e.g., a billing number or charge number) ,s 
™ extracted from the call setup signaling. The billing information fiom the mcomrng 

X(e g call leg 3) is men mapped ,o a cal, on the outgoing trunk ro .dentify me 

outgoing call leg, me system can then also identify the assoctared tneommg call leg 

later use. A check can be made to determine if the call relates to a p y 
25 surveillance is to be performed. 

A. 1032, an appropriate destination-indicating electron, survet.lance 
meS sagc is consumed. For example, an origtnation message can he constincted 

„ f the calling parry (e.g., acutred from cal, setup information re^ ,o one he 
,0 ca„ legs) and me destination (e.g., ac,uired from ca„ setup ^formation re,a,ed to 
I leg fiom me service platform switch, The e,ec,ro„,c survetilance message can 
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then be sent to a monitoring device. For example, a device 1 120 may be designated 
as a law enforcement monitoring device. 

Eventually, the call makes its way to the destination number (e.g., 
determined from the "called number" parameter of call leg 3), establishing a call leg 
from the redirecting switch directed to the destination (e.g., in the example, the call 
is directed to the phone number "2065559876" via the public switched telephone 
network 1112). 

Example 7 - Exemplary Signaling for Electronic Surveillance for a 
Hairpin Loop Scenario in a Directory Assistance Call Completion Situation 
FIGS. 1 1 A and 1 IB show an exemplary signaling arrangement for achieving 
electronic surveillance for a hairpin loop scenario in a directory assistance call 
completion situation. In the example, signaling is done to comply with the J-STD- 
025 standard for achieving lawfully authorized electronic surveillance (e.g., by 
sending origination messages). However, signaling could be done in a variety of 
other ways, including a way that complies with another standard or a revision of the 
J-STD-025 standard. Further, in the example, electronic surveillance of content is 
performed. However, other types of surveillance (e.g., trap and trace or pen register) 
may involve less or more signaling. For example, voice monitoring need not be 
performed. 

In the example, call setup information (e.g., "411") is sent from a telephone 
1 1 14 to a redirecting switch 1116. Because it is determined that the call originates 
from a monitored party, an origination message (e.g., indicating a call identifier 
("callid") parameter of "1234," a called party parameter of "4255551 1 11," and a 
user-input parameter of "411") is sent to a monitoring device 1 120, enabling real- 
time electronic surveillance. Then, an I AM (e.g., including a called party parameter 
of "2025555678") is sent to the monitoring device 1120 (shown as "IAM-LEA"). 

Then, an I AM (e.g., including a called party parameter of "4255551 1 1 1" and 
a charge number parameter of "4255551234") is sent to the service platform switch 
1118 (shown as "IAM-2"). After various other signaling, an electronic surveillance 
voice path is established by which a one-way monitoring of the content (e.g., what is 
said over the line) can be achieved. A CCOPEN (e g , including a callid parameter 
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of "1234" and a CCCID parameter of "2025555678") is sent to the monitoring 
device 1120. 

After further signaling, a voice path is established by which the caller can 
ask for directory assistance (shown with reference to call legs 1 and 2). As a result 
of determining the call's destination (e.g., "2065559876"), another IAM (e.g., 
including a called party parameter of "2065559876" and a charge number of 
"4255551234") is sent from the service platform switch 1 1 18 to the redirecting 
switch 1116 (shown as "IAM-3"). As a result, construction of call leg 3 is 
attempted. 

Having correlated the parameters from IAM-2 and IAM-3 and determining 
that the call is subject to electronic surveillance, electronic surveillance processing 
takes place. In the example, electronic surveillance processing includes sending an 
origination message indicating the destination (e.g., including the callid parameter 
"1234," translation-input parameter "4255551 1 11," and called party parameter 
"2065559876") from the redirecting switch 1 1 16 to the monitoring device 1 120. For 
example, the origination message can be built based on the destination number from 
call leg 3, the translation input from call leg 2, and the callid from call leg 1. 

An IAM (e.g., including a called party parameter of "2065559876") is then 
sent to the network 1112 (shown as "IAM-4"). After appropriate additional 
signaling, a voice path is established (shown with reference to call legs 1-4). After 
completion of the call, other release signaling can take place (e.g., including the 
release signaling as shown in the example). 

Example 8 - Exemplary Scenario Involving Call Termination 

Although some of the examples show signaling relating to call origination 
processing, it is possible to have a scenario based on any of the described examples 
relating to call termination processing. For example, during call termination 
processing, a call can be routed to a service platform switch, which determines a 
different destination for the call. 

One such example is for prepaid processing. A call can be sent to a prepaid 
service platform switch during termination processing (e.g., to a subscriber who is 
using prepaid services) by a redirecting switch (e.g. ; upon determination by the 
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switch that the subscriber is a prepaid subscriber). The service platform switch (e.g., 
the prepaid services switch) may redirect the call to a different destination under 
certain conditions (e.g., the subscriber has activated call forwarding on busy or 
unconditional call forwarding). In such a case, the service platform switch can 
direct the call back to the redirecting switch, and correlation will occur. 

Based on correlation of the call legs, an appropriate electronic surveillance 
message can be sent to a monitoring device indicating the destination (e.g., in a J- 
STD-025 standard scenario, a redirection message can be sent indicating the call was 
redirected to the destination). 

Example 9 - Exemplary Signaling for Electronic Surveillance for a 
Hairpin Loop Scenario in a Prepaid services Situation 
FIGS. 12A and 12B show an exemplary signaling arrangement for achieving 
electronic surveillance in a situation involving prepaid services. In the example, a 
telecommunications network 1200A and 1200B comprises access to a public 
switched telephone network 1212, a redirecting switch 1216, and a service platform 
switch 1218 for processing prepaid services. The service platform switch 1218 can 
provide other or additional services (e.g., directory assistance call completion, voice- 
activated dialing, or voicemail callback), and the illustrated technologies work m a 
similar manner. Electronic surveillance processing can be performed transparently 
to the service platform switch 1218. For example, the service platform switch 1218 
need not include functionality related to electronic surveillance message generation. 

In the example, ISUP signaling (e.g., for an SS7 network) is shown, but 
other signaling interfaces (ISDN-PRI, ISDN-BRI, Rl Feature Group-D, or GSM- 
based implementations) or protocols can be used. Although FIGS. 12A and 12B 
depict a Charge Number parameter, any number of other parameters (e.g., a calling 
party number or call reference parameter) can be used in its place for correlation. A 
monitoring device 1220 can be used to receive electronic surveillance messages for 
law enforcement. 

Further, in the example, signaling is done to comply with J-STD-025 
standard for achieving lawfully authorized electronic surveillance (e.g., by sending 
origination or redirection messages). However, signaling could be done in . variety 
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of other ways, including a way that complies with another standard or a revision of 
the J-STD-025 standard. 

As shown in FIG. 12 A, an IAM (i.e., IAM-1 with Called Party = 
"4255551234") is sent from the network 1212 to the redirecting switch 1216. For 
5 example, a party using a calling card from a pay phone can call a subscriber "425- 
555-1234," who has call forwarding activated for a prepaid phone. The calling party 
is not included in the message because the calling party is using a calling card. 

Call processing can determine the call is to be intercepted (e.g., based on the 
Called Party parameter) and performs J-STD-025 operations as shown (e.g., the 
10 resulting various messages sent to the monitoring device 1220), including the 
TerminationAttempt message. Call processing then determines the call is to be 
routed over an outgoing hairpin trunk group and populates the billing identity with a 
dynamically assigned temporary ANI (e.g., 425555222) per configuration of the 
redirecting switch 1216. 
15 Because the called party is determined to be a prepaid customer, the call is 

routed to the prepaid platform 1218 for handling. Accordingly, the redirection 
electronic surveillance message (i.e., with callid = "1234" and redirected to party = 
"4255551234") is sent to the monitoring device 1220 and an IAM is sent to the 
service platform switch 1218 (i.e., IAM-2 with Called Party = "4255551234" and 
20 Charge Number = "4255552222"). 

The prepaid platform 1218 then performs redirection of the call based on the 
subscriber profile. Redirection can be performed to ensure the resulting call can be 
properly billed against the subscriber's prepaid account. Accordingly, an IAM is 
sent back to the redirecting switch 1216 (i.e., IAM-3 with Called Party = 
25 "2065559876" and Charge Number = "4255552222"). 

The Charge Number "4255552222" on the incoming call leg can then be 
mapped (i.e., correlated) to the second call leg (i.e. from IAM-2) on the outgoing 
trunk. Based on having found a correlation, a redirection message can be built based 
on the Destination Number (i.e., Called Party), stored data input from the second call 
30 leg and the callid parameter from the first call leg (i.e., from IAM-1). The 
redirection message is then sent as an electronic surveillance message to the 
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monitoring device 1220 (i.e., the Redirection message with callid = "1234" and 
Redirect to = "2065559876"). 

The call is then routed to its destination (i.e., via IAM-4). Remaining 
signaling as shown in FIG. 12B handles establishing a voice path and the eventual 
release of call legs. 

Example 10 - Exemplary Switch System for Achieving Electronic 
Surveillance in a Hairpin Loop Scenario 

FIG. 13 shows an exemplary switch system 1300. The system can be used to 
achieve electronic surveillance in hairpin loop scenarios. For example, the switch 
system 1300 can be used as an implementation of a redirecting switch (e.g., switch 
424, switch 824, or switch 1116). The switch system 1300 can be implemented, for 
example, as a Mobile Switching Center or a Class 5 Switch. Various ports 13 06 A, 
1306B, and 1306N are shown. More ports can be implemented as desired. 

The switch system 1300 can be implemented in any of a variety of switch 
hardware by adding a software upgrade or modification by which the switch system 
1300 can identify and avoid a hairpin loop scenario. Although information can also 
be stored for other call legs, in the example, correlation keys store 1312 stores the 
correlation keys for call legs directed from the switch 1300 to a service platform 
switch. The under surveillance list 1322 stores a list of identities for which 
electronic surveillance is to be performed. In the example, correlation keys are 
stored only for those calls going out on trunks listed in a trunk list store and for 
which an identity is listed in the under surveillance list 1322. 

In some systems, separate stores for some information are not required. For 
example, the switch system 1300 might support a software request to locate a call 
instance on an outgoing hairpin loop trunk group matching a supplied parameter 
(e.g., billing information for a call coming in on an incoming hairpin loop trunk 
group). 

The compare logic 1332 is operable to compare information (e.g., billing, 
party identifier, or other information) with that stored in the correlation keys store 
1312. Although comparison could be done for more call legs, in the example, 
comparisons are done only for call legs coming in on trunks listed in a trunk Hst 
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store. The trunk list store can designate such trunks in a variety of ways. For 
example, a trunk can be given a particular type (e.g., type "incoming hairpin loop"). 
Trunks having the type are then considered to be in the list. Or, trunk identifiers can 
be stored in a list of trunks (e.g., in the same list as the outgoing hairpin loop trunks 
or in a separate list). 

If the compare logic 1332 finds a match between an outgoing call leg and an 
incoming call leg, a hairpin loop scenario is indicated. In the example, only keys for 
those calls being monitored are stored, so electronic surveillance processing takes 
place. Alternatively, after a match is detected, the under surveillance list 1322 
could be checked to see if the match relates to a party under surveillance. 

Responsive to detecting a match by the compare logic 1332, the electronic 
surveillance message construction logic 1342 is activated. The electronic 
surveillance message construction logic 1342 is operable to construct an electronic 
surveillance message to achieve electronic surveillance processing (e.g., in a hairpin 
loop scenario). 

In the example, the redirecting switch can be configured to have at least two 
special unidirectional trunk groups: an outgoing trunk group (e.g., used for calls 
routed from the redirecting switch to the service platform switch) and an incoming 
trunk group (e.g., used for calls returning from the service platform switch to the 
redirecting switch). Alternatively, bi-directional trunks can be used. 

Trunk configuration for any of the examples can be done to ensure calls are 
handled properly and to avoid unnecessary processing (e.g., checking for hairpin 
loops scenarios in situations where such scenarios are not likely or impossible to 
occur). 

Example 11 - Exemplary Implementations Using Various Communications 

Protocols 

To implement the illustrated examples, the interface between a redirecting 
switch and the service platform switch can use call setup signaling capable of 
transmitting any of a variety of information useable as correlation information (e.g., 
calling party identity, billing number, or both). For example, ANI can be used. 
Examples of signaling interfaces that can be used include ANST-ISUP signaling 
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(e.g., the Calling Party Number, Charge Number, or some combination of the 
parameters are supported in the IAM), ISDN-PRI signaling (e.g., the Calling Party 
Number is supported in the Setup Message), Rl Feature Group-D Signaling (e.g., 
ANI delivery is supported). Other signaling interfaces, including ITU-ISUP (e.g., 
calling party number is supported) can be used. Further, the call reference parameter 
for ISDN/ISUP signaling can be used for correlation. 

Use of other signaling parameters specific to a signaling interface (e.g., the 
"call reference" parameter in ISDN/ISUP signaling) is possible. In some cases, it 
may be desirable to combine two or more parameters for correlation. 

For any of the illustrated examples, the service platform switch can return the 
correlation information unmodified in the same signaling parameter as received 
from the redirecting switch, but other arrangements are possible. 

If the destination (e.g., calling party number) is unmodified, then additional 
electronic surveillance messages need not be generated). 

Example 12 - Exemplary Method for Achieving Electronic Surveillance for 
a Hairpin Loop Scenario and Optional Simultaneous Multi-Call Support 

FIG. 14 shows a method 1400 for achieving electronic surveillance in a 
hairpin loop scenario, including optional support for a situation in which a caller can 
have more than one call active at a time. The method can be used with any of the 
depicted telecommunications systems. 

At 1412, when a call is routed from a redirecting switch to a service platform 
switch, a parameter (e.g., billing identity or calling party identity) is populated with 
a unique value. For example, the unique value can be a subscriber's calling identity 
(e.g., Directory Number (DN), Mobile Directory Number (MDN), Mobile Station 
ISDN number (MSISDN), Mobile Identification Number (MIN), Mobile Station 
Identifier (MSI), or a dynamically generated identifier such as Temporary Mobile 
Station Identifier (TMSI)). 

However, some service platform switch services may permit multiple 
simultaneous call instances to be associated with a single subscriber's number. In 
such an arrangement, a pool of dedicated identities (e.g., billing identities) can be 
used. For example, a billing identity can he selected out of a pool of dummy (e.g.. 
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not identifying an actual subscriber) identities and used for a call. The selected 
identity can be temporarily associated with the actual identity for billing purposes. 
For call setup signaling, the selected identity can be substituted for the actual 
identity in hairpin loop call legs. 

An example in which such an arrangement can be useful is in situations 
involving multi-line capability for the same directory number or call termination 
services. In the case of call termination services, multiple callers may be redirected 
to the service platform switch before being redirected away from the subscriber 
(e.g., routing terminating calls to a prepaid service system before delivery to a 
voicemail system). The use of dedicated billing identities can also aid in identifying 
call records associated with the hairpin loop for removal in downstream billing 
processing. 

At 1414, calls arriving on the incoming hairpin loop trunk group trigger an 
event to locate the call instance for the corresponding outgoing hairpin loop trunk 
group matching the configured correlation parameter. 

At 1416, upon finding a match of the correlation tags, electronic surveillance 
processing for the hairpin loop can take place. In the example, the switch sends an 
electronic surveillance message to a monitoring device. The electronic surveillance 
message can indicate the destination (e.g., determined as a result of service platform 
switch processing). 

If the calling party identity or billing identity were modified for call 
processing (e.g., to be one of a dedicated group of billing identities), the switch can 
restore the calling party identity (e.g., for signaling when the call is directed to its 
destination). 

Example 13 - Electronic Surveillance Messages 
As a result of correlating call legs for a call that is the subject of electronic 
surveillance, a variety of electronic surveillance messages can be used in any of the 
depicted examples. For example, an origination message or redirection message can 
be sent. Such a message can include, for example, an indication of a call's 
destination. Additional information can be included. For example, a translation- 
input parameter can indicate the number called by which the destination was 
determined (i.e., the number that translated the user's request into a destination). 
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Also, a callid parameter can be tracked and included to associate messages with a 
uniquely-identified particular call. 

Electronic surveillance messages can be sent immediately for real time 
monitoring, or a log can be constructed by which the electronic surveillance 
messages are saved for later retrieval. In some cases, maintaining a log beyond a 
certain time period may not be permitted for legal reasons. 

Example 14 - Releasing Call Legs to Avoid a Hairpin Loop Scenario 

Upon correlation of call legs, in addition to constructing an appropriate 
electronic surveillance message indicating a destination of a call, the call legs can be 
processed as a hairpin loop. For example, call legs can be released to avoid or 
remove the hairpin loop, thus conserving network resources. 

During hairpin loop processing, release of an outgoing leg can be 
accomplished in an indirect fashion (e.g., by releasing the incoming leg, which 
triggers release of the outgoing leg). 

For example, with reference to FIG. 8, the port on which the call arrived 
842A can be parked while the other ports 842C and 842D are released. During 
parking, silence can be applied to the voice path. 

Further, with reference to FIG. 13, additional logic (e.g., hairpin loop 
removal logic) can be included to park a call leg (e.g., an incoming call leg from a 
subscriber) and then release other legs, while directing the call to its destination. 
Silence can be applied to the call during release. 

Example 15 - Implementing the Technology to Upgrade Equipment in 
Conventional Networks 
One useful application of the described technologies is upgrading equipment 
in conventional networks. For example, electronic surveillance processing (e.g., 
message generation and sending) can be done transparently to service platform 
switches. Accordingly, such service platform switches need not be upgraded. 
Further, the illustrated technologies can be used in systems not having special 
provisions for electronic surveillance. As a result, conventional switches using 
ordinary call setup signaling and conventional interfaces can be easily upgraded with 
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the added expense of incorporating supplementary services, new signal protocols, 
new interfaces, or new parameters. 

Alternatives 

The described technologies can be applied for use in any of a variety of 
landline or mobile telecommunications networks. For example, the technologies can 
be applied for use in GSM networks. In some cases, additional (e.g., intermediary) 
switches may be involved in the technologies. Although hairpin loop scenarios have 
been shown in the examples, other scenarios are possible (e.g., any scenario in 
which a call is redirected to a service platform switch that determines a destination). 

In general, although the examples have been discussed primarily in the 
context of using calling party or billing identifiers to correlate call legs, many other 
identifiers used by a network to identify users or transactions can be used. Providing 
an exhaustive list is beyond the scope of this document, but some other examples of 
suitable identifiers include Electronic Serial Number (ESN), International Mobile 
Station Identifier (IMSI), and IM-EI. Other identifiers include, for example, 
Directory Number (DN), Mobile Directory Number (MDN), Mobile Station ISDN 
number (MSISDN), Mobile Identification Number (MIN), Mobile Station Identifier 
(MSI), or a dynamically generated identifier such as Temporary Mobile Station 
Identifier (TMSI). Any other identifier, such as an Internet domain name or Internet 
address can also be used. In some cases, a combination of identifiers can be used for 
correlation (e.g., combination of calling party number and charge number). 

Some of the examples describe using two groups of unidirectional trunks. 
In a unidirectional arrangement, traffic can pass in both directions, but certain trunks 
can be designated for call setup signaling from a particular (e.g., incoming) 
direction. In this way, the number of trunks being checked during correlation can be 
reduced. For example, when correlating for an incoming call leg, only identifiers for 
outgoing call legs need be checked. Alternatively, trunks need not be so designated. 
For example, a trunk might both initiate and receive calls. 

Similarly, some of the examples describe input or output ports. However, an 
arrangement involving ports not so designated can be used in addition to or instead 
of having ports designated for input or output. 
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In some of the examples, a particular type of call setup signaling (e.g., ISUP) 
is depicted. However, other types of call setup signaling (e.g., any signaling for 
initiating and establishing calls, such as that for ISDN-PRI, ISDN-BRI, Rl Feature 
Group-D, or GSM-based implementations) can be used instead. 

Further, in some examples, electronic surveillance of content (e.g., voice) is 
performed. However, other types of surveillance (e.g., trap and trace or pen register) 
may involve different electronic surveillance signaling. For example, voice 
monitoring need not be performed. 

Still further, in some of the examples, an identifier is correlated with another 
identifier passed via the same parameter. Alternatively, the correlation can be done 
via different parameters. For example, a called party parameter can be correlated 
with a charge number parameter. Also, more than one parameter can be combined 
for correlation. In some cases, correlation can be done even though the values of 
identifiers being correlated are not identical. For example, in a prepaid scenario, 
additional information may be prepended to an identifier. 

In view of the many possible embodiments to which the principles of the 
invention may be applied, it should be recognized that the illustrated embodiments 
are examples of the invention, and should not be taken as a limitation on the scope 
of the invention. Rather, the scope of the invention includes what is covered by the 
following claims. I therefore claim as my invention all that comes within the scope 
and spirit of these claims. 
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